Configuring Servers For Certificate Request - 3Com 3C13636 Configuration Manual

3Com Router 3000 Ethernet Family
Configuration Guide

9.2.4 Configuring Servers for Certificate Request

I. Configuring the entity for certificate request
An entity is required for certificate request; it is used to prove the identity to the CA.
Perform the following configuration in PKI domain view.
Table 9-3 Configure the entity for certificate request
Specify the entity for certificate request
Remove the entity reference relationship
By default, no entity is specified for certificate request.
Note:
For information about the entity-name argument, refer to section 9.2.5 "Configuring
Entity Name Space"
II. Specifying a registration organization
Registration management is often implemented by an independent registration
authority (RA), which is responsible for coping with certificate request, examining entity
qualification and determining for CA whether or not to issue the digital certificate. It
does not issue the certificate, as is performed by CA. Sometimes no independent RA is
set. It doesn't mean that registration function of PKI is disabled, since CA takes over the
registration management.
Perform the following configuration in PKI domain view.
Table 9-4 Specify a registration organization
Choose between CA and RA as the
registration organization
Delete the registration organization
By default, no registration organization is specified.
PKI security policy recommends the involvement of RA.
Operation
Operation
3Com Corporation
9-5
Chapter 9 PKI Configuration
Command
certificate request entity entity-name
undo certificate request entity
Command
certificate request from { ca | ra } entity
entity-name
undo certificate request from { ca | ra }